Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pA7BaH47av09Hu75UlSBJABzgbE.roa
File: pA7BaH47av09Hu75UlSBJABzgbE.roa (raw, json)
Hash identifier: nK88ZKRg6F/gpNcKbKaj0bBihwsdP/yldrkGsahMTik=
Subject key identifier: A4:0E:C1:68:7E:3B:6A:FD:3D:1E:EE:F9:52:54:81:24:00:73:81:B1
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01997BA1C88427B624F093153E9F96E072B9
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pA7BaH47av09Hu75UlSBJABzgbE.roa
Signing time: Wed 24 Sep 2025 12:10:24 +0000
ROA not before: Wed 24 Sep 2025 12:10:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209101
IP address blocks: 45.151.91.0/24 maxlen: 24
94.103.125.0/24 maxlen: 24
94.154.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:7b:a1:c8:84:27:b6:24:f0:93:15:3e:9f:96:e0:72:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 24 12:10:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a40ec1687e3b6afd3d1eeef952548124007381b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bc:ce:69:12:56:88:be:59:2c:23:c1:9f:3e:
9b:74:46:04:98:8b:8d:8c:39:c7:1d:9e:83:ee:7f:
5b:d6:4f:18:94:4d:08:d7:92:bb:aa:a5:87:8a:9b:
56:13:ac:aa:6f:b9:55:75:21:76:bc:b8:c9:44:ac:
a9:91:0a:d6:83:1f:f3:a1:65:b0:71:c4:cd:d4:12:
5c:15:c4:07:0a:b6:b9:19:38:a0:1a:5d:0f:c1:9e:
8d:51:86:f5:a8:b2:aa:67:52:88:d8:b8:31:fa:b2:
94:79:59:24:8a:2f:b3:ec:ab:ed:0a:65:b3:5b:6a:
3d:ea:96:df:b2:c4:0b:dd:48:00:1b:1b:35:8c:ba:
de:ef:fc:22:67:2d:0d:4b:b5:ec:9c:55:51:0c:d5:
7a:90:3e:0d:1f:6e:a8:da:8a:01:85:d0:bf:74:42:
37:3e:30:06:6a:ef:46:0c:28:c3:9f:37:2b:37:b2:
d3:a8:0d:31:5c:04:f7:ea:fa:84:d7:48:68:8f:15:
f9:f9:79:b3:fc:38:32:d4:22:be:4e:ef:ad:e2:29:
5a:a7:80:aa:a9:0f:a7:45:d5:0f:94:8b:29:ae:3e:
7f:42:24:14:53:49:87:35:27:97:85:d0:2a:6d:9f:
c5:7e:fb:c3:de:ca:e2:74:b0:b6:bb:81:05:78:c3:
af:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:0E:C1:68:7E:3B:6A:FD:3D:1E:EE:F9:52:54:81:24:00:73:81:B1
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/pA7BaH47av09Hu75UlSBJABzgbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.91.0/24
94.103.125.0/24
94.154.172.0/24
Signature Algorithm: sha256WithRSAEncryption
11:6c:8f:6b:23:58:ea:92:71:dd:b8:cc:f7:40:ba:2e:45:3e:
94:3d:bb:d4:ae:da:6b:b5:95:f4:e8:d3:1d:40:cf:e5:5b:45:
d2:8b:6c:44:fe:da:7f:67:ac:04:a6:28:f3:ac:a3:57:eb:08:
5e:a0:3f:ec:df:2b:19:e2:bb:a3:8a:08:7f:c4:80:29:9c:59:
58:86:38:d2:a2:3b:e7:a0:20:e2:d0:f0:50:5a:24:c9:39:0f:
63:e2:0a:f0:c6:e4:c8:72:37:b1:f4:c6:fd:ec:e6:33:5b:e4:
91:6f:30:be:90:ba:e6:4e:dc:0b:52:54:4f:41:a6:73:fd:00:
6c:97:8e:f2:11:93:10:94:f8:bf:8a:a2:08:16:32:43:da:66:
53:89:d9:e1:d6:cb:71:bf:6c:11:6b:82:cf:29:02:85:88:c4:
f8:7c:6e:48:19:76:53:08:83:a0:3b:71:55:50:8d:6f:6b:4c:
47:aa:b5:d1:3c:5f:f8:02:55:70:6a:7c:f0:a8:e0:b2:0e:59:
c7:83:4b:9d:e6:bb:69:14:36:b3:4e:4e:30:36:6e:c6:0f:08:
63:e8:b4:5f:a3:61:94:4a:00:06:89:5c:4c:92:b8:04:61:7a:
bc:b4:6f:f4:10:31:21:0c:35:65:52:0d:43:f7:8c:70:9b:2a:
b9:c7:90:37
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZl7ociEJ7Yk8JMVPp+W4HK5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwOTI0MTIxMDI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNDBlYzE2ODdlM2I2YWZkM2QxZWVlZjk1MjU0ODEyNDAwNzM4MWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbzOaRJWiL5ZLCPBnz6bdEYEmIuN
jDnHHZ6D7n9b1k8YlE0I15K7qqWHiptWE6yqb7lVdSF2vLjJRKypkQrWgx/zoWWw
ccTN1BJcFcQHCra5GTigGl0PwZ6NUYb1qLKqZ1KI2Lgx+rKUeVkkii+z7KvtCmWz
W2o96pbfssQL3UgAGxs1jLre7/wiZy0NS7XsnFVRDNV6kD4NH26o2ooBhdC/dEI3
PjAGau9GDCjDnzcrN7LTqA0xXAT36vqE10hojxX5+Xmz/Dgy1CK+Tu+t4ilap4Cq
qQ+nRdUPlIsprj5/QiQUU0mHNSeXhdAqbZ/FfvvD3sridLC2u4EFeMOv+wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKQOwWh+O2r9PR7u+VJUgSQAc4GxMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcEE3QmFINDdhdjA5SHU3NVVsU0JKQUJ6Z2JFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALZdbAwQA
Xmd9AwQAXpqsMA0GCSqGSIb3DQEBCwUAA4IBAQARbI9rI1jqknHduMz3QLouRT6U
PbvUrtprtZX06NMdQM/lW0XSi2xE/tp/Z6wEpijzrKNX6wheoD/s3ysZ4rujigh/
xIApnFlYhjjSojvnoCDi0PBQWiTJOQ9j4grwxuTIcjex9Mb97OYzW+SRbzC+kLrm
TtwLUlRPQaZz/QBsl47yEZMQlPi/iqIIFjJD2mZTidnh1stxv2wRa4LPKQKFiMT4
fG5IGXZTCIOgO3FVUI1va0xHqrXRPF/4AlVwanzwqOCyDlnHg0ud5rtpFDazTk4w
Nm7GDwhj6LRfo2GUSgAGiVxMkrgEYXq8tG/0EDEhDDVlUg1D94xwmyq5x5A3
-----END CERTIFICATE-----
Generated at Sun Oct 19 22:25:35 2025 by rpki-client